Merge "Allow ephemeral_app to execute system_file." into pi-dev