Merge "Track platform_app SELinux denial." into pi-dev