Merge "Allowing profile to set a subset of keyguard restrictions." into mnc-dev