RESTRICT AUTOMERGE TextClassifier cross-user vulnerability in direct-reply am: 34e380cdd6

Change-Id: I43130453f6b576679c52be643344589ac624dadd