@535ec9d7 @d82adc62 Interesting! If I understand right, there's a receiver that triggers on package install, scans the manifest for this key (and an associated signature) and then applies an updated config globally, for all apps? https://cs.android.com/android/platform/superproject/+/master:frameworks/base/services/core/java/com/android/server/signedconfig/GlobalSettingsConfigApplicator.java;l=98;drc=e2b2432bc64fbbca667f11c79d0dc5e4f627284b Looks like this is a way to dynamically relax more APIs at the device level, maybe?