Merge "CDD: Users or app developers MUST NOT change SELinux Policies." into oc-dev