framework: Privacy Guard (1/2)

second half of code is pushed to packages/settings legacy branch