am b6f38def: Merge "run-as: bracket capability"

* commit 'b6f38def22add4b5d6878185d238f91659239161':
  run-as: bracket capability