add certtest app with all permissions, and add device setup script