Merge "Limit the settings profile/device owners can update." into lmp-dev