Merge "ephemeral_app: disallow access to qtaguid files" into pi-dev