Merge "Ensure /sys restrictions for isolated_apps" am: eb1ae18836
am: a2cf96bcd3

Change-Id: I88c0a9aed3834af405b4666d04c6203c145f8214