only allowed for system-apps