Ensure /sys restrictions for isolated_apps am: 62d3b4f103 am: 8f6a5f57f9
am: 9aa56dfb09

Change-Id: I6da11d0ea1f5689b37a9d08e3534e6bc80b870be