#on early-boot
on post-fs
start tee-supplicant
service tee-supplicant /vendor/bin/tee-supplicant
class core
seclabel u:r:tee:s0