Activity can be used only in two cases. 1) Calling uid matches uid grantee. 2) Calling uid is is system. This flow is used by getToken methods with notifyAuthFailure=true. Test: Existing CTS tests Bug: 158480899 Merged-In: I983fa Change-Id: I8da362df269decd7c3930a2387f42e09796e732f