1service vendor.oemlock_hal /vendor/bin/hw/android.hardware.oemlock@1.0-service.citadel 2 class hal 3 user hsm 4 group hsm 5