Merge "Allow internal services access to instant apps" into oc-mr1-dev