Merge "Added a CTS test to verify run-as has an exact set of caps."