service vendor.oemlock_default /apex/com.google.cf.oemlock/bin/hw/android.hardware.oemlock-service.remote /dev/hvc10 class hal user hsm group hsm