service vendor.authsecret_hal /vendor/bin/hw/android.hardware.authsecret@1.0-service.citadel
    class hal
    user hsm
    group hsm