Merge "Reject accesses to app-private dirs on FUSE for emulated volumes." into sc-dev