Merge remote-tracking branch 'aosp/oreo-mr1-security-release' into lineage-15.1

* aosp/oreo-mr1-security-release:
  [RESTRICT AUTOMERGE]: Merge commit '217f31fb' into OP_REQUEST_INSTALL_PACKAGES-denied
  Ask for PIN when granting permissions in front of lock screen
  RESTRICT AUTOMERGE: Trust session id only if started with ACTION_CONFIRM_INSTALL
  RESTRICT AUTOMERGE: Always use safe labels

Change-Id: I90dd2a6fcbc28d7de845dda32ec17600d5b6b993