Merge "Limit grantTrust() duration to DevicePolicy-imposed limit." into lmp-dev