Hi @jeez as actually I've not investigated too much about zygote and renderers, but looks like we are following chromium's approach that using the zygote to fork all the render process right? so, switching the smack label and drop the caps seems should better be done in zygote, although it's fairly okay to do it in renderer from security point of view.