Merge "Sepolicy: Give zygote rights needed for A/B OTAs" into nyc-dev