add access-manager remote and add DeviceAccessPolicy
merge master