Allow installation of overlays to /data, but only if the overlay is platform signed, or the overlay targets SDK Q or later. Bug: 121016681 Test: atest CtsAppSecurityHostTestCases:OverlayHostTest OverlayDeviceTests OverlayHostTests Change-Id: I63df9e7c4714f4c3aad861b1fb76cf8eb891c29d