[DO NOT MERGE] Don't allow permission change to runtime am: fe430be9f1 am: 903102fa54 am: 33f5a3ccb3
am: 4682420d59

Change-Id: I2855b5a4f566006fe08eac46b9eb78a8662c915e