[automerge] Enforce that sdk sandbox may only bind/start allowed services 2p:...

[automerge] Enforce that sdk sandbox may only bind/start allowed services 2p: 65a00767 2p: d5dca749

Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/17239544

Bug: 209770510
Change-Id: Ia4ec4a81c3f6b3105d1cebda4a26fc56bab4f1be