service vendor.keymint-citadel /vendor/bin/hw/android.hardware.security.keymint-service.citadel
    class early_hal
    user hsm
    group hsm drmrpc