Merge the 2019-08-01 SPL branch from AOSP-Partner

* security-aosp-nyc-mr2-release:
  Clear the Parcel before writing an exception during a transaction
  Protect VPN dialogs against overlay.
  [RESTRICT AUTOMERGE] Make Lock task default behaviour consistent with Settings.
  SUPL ES Extension - June 2019 rollup
  Limit IsSeparateProfileChallengeAllowed to system callers
  [RESTRICT AUTOMERGE]: Add cross user permission check - areNotificationsEnabledForPackage
  [RESTRICT AUTOMERGE] Added missing permission check to isPackageDeviceAdminOnAnyUser.
  Permission Check For DPM.getPermittedAccessibilityServices

Change-Id: Ic42855742de81476527df18c96d962cb93343961