allow hal_gatekeeper_default gatekeeper_vendor_data_file:dir { read open };