Merge "Lock down access to getProfiles for 3P apps" into nyc-dev