Merge "appdomain: neverallow direct input_device access"