using the default aosp applications i am seeing the following logs  i talked to nick and i am going to split the auditallows across the specific domains to make it very clear which app domains use which services  untrusted app  drmserver service mediaserver service nfc service surfaceflinger service system server service  platform app mediaserver service radio service surfaceflinger service system server service  system app  nfc service surfaceflinger service system server service