Merge "system_server: neverallow blk_file read/write"