Merge "Add system trust agents on first boot or when adding user" into lmp-dev