Merge "Use hidden API to validate APK chains" into jb-dev