PackageManager: Restrict system packages to protected storage