Use signature-based trust for package name overrides Shift the trust model for EXTRA_PACKAGE_NAME overrides from installation status (FLAG_SYSTEM) to cryptographic signatures. Only packages signed with core system certificates are now permitted to override the calling package name. Bug: 424853397 Bug: 397217317 Flag: EXEMPT Bugfix Test: manual Cherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:08582e104a16b18f578a69ee9bca418226ba8360 Merged-In: I0c337720e42f6492573d261ae66fa88c511cd99e Change-Id: I0c337720e42f6492573d261ae66fa88c511cd99e