DeviceSettings: turn into privileged app