Merge "Allow primary user profile owner to set device restrictions" into lmp-dev