allow hal_gatekeeper_default teei_client_device:chr_file rw_file_perms;