Merge "Add an API for apps to query if a permisison is denied by policy." into mnc-dev