Merge "Give the PO the MANAGE_DEVICE_POLICY_CERTIFICATES permission" into udc-dev