Merge "Allow shell to get encryption policy for CTS"