#on early-boot
on post-fs
    start tee-supplicant


service tee-supplicant /vendor/bin/tee-supplicant
    class core
    seclabel u:r:tee:s0