service vendor.gatekeeper-default /vendor/bin/hw/android.hardware.gatekeeper-service
    class hal
    user system
    group system 5678

on post-fs-data
    mkdir /data/vendor/gatekeeper 0770 system system