1recovery_only(`
2  allow recovery citadel_device:chr_file rw_file_perms;
3  allow fastbootd citadel_device:chr_file rw_file_perms;
4')
5