add bootloader restrictions to OTA metadata Doesn't touch device code. Change-Id: I8941e5a07dc589514446544a15f17f623101ecca