Merge change 4248 into donut

* changes:
  Remove ADD_SYSTEM_SERVICE and SET_PROCESS_FOREGROUND permissions.