Maybe the mmac_permissions spam at early boot is from not having this?

(from CM)

Change-Id: I229343f9c7f756922114dce915b14cd4f4fe51d5