Merge "Give new permission to set cross-profile app-op to ManagedProvisioning"