Merge "Ensure /sys restrictions for isolated_apps" am: eb1ae18836 am: a2cf96bcd3
am: 1e6ca6fae5

Change-Id: Ic4bac09bef9e3b42115e9bf0b173831c75ee9938