Merge "Ensure /sys restrictions for isolated_apps"