Merge "Add more neverallows to app_zygote policy."