Control mechanism for os-apply-config

We require a control mechanism in os-apply-config (oac). This could be
used, for example, to:
  * Not create an empty target
  * Set permissions on the target

Change-Id: I8fe7126d7261c1f106d7413bd31aa379e9ae5c3e
Merge "Control mechanism for os-apply-config"