allow hal_fingerprint_default tee_device:chr_file rw_file_perms;