Merge "On-device signing: reject everything that's not a regular file/dir."