Merge remote-tracking branch 'upstream-restricted/pr/405' into mbedtls-1.3-restricted