Merge "Fail with an error if we can\'t read the policy for encryption am: 8d53b9619b am: fa85e9f0c4" into nyc-mr1-dev-plus-aosp