This makes me really sad to have an hardcoded list. Can't we have a permission instead or can we grant that to certified apps that use an attention screen?