Ensure /sys restrictions for isolated_apps am: 62d3b4f103
am: 8f6a5f57f9

Change-Id: Ib476fa26393087705c1c9f8f9e0f472b4f6e4d4c