[automerger skipped] Rework device policy user restrctions. am: 3ed359b5 -s ours

am skip reason: Merged-In I504b16bbbac99ac731580247b57f55a9b213609f with SHA-1 d3ecb378 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/21480344



Change-Id: Id529ab1fdbc923501b35fab1a37a4626d5327498
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>