Merge "CDD: add per-app selinux requirements for P" into pi-dev