Merge "RESTRICT AUTOMERGE: CTS: Verify DynamicRefTable::load security fix" into nyc-dev