Merge changes from topics "protect-policy-flags", "policy_fixed_set_via_perm_controller"

* changes:
  Add ADJUST_RUNTIME_PERMISSIONS_POLICY to test manifest
  Device admins can now handle pre-M apps