"and setup a cgroup for the framework service/binary to run under" and then add the tagged device to this cgroup.
"and setup a cgroup for the framework service/binary to run under" and then add the tagged device to this cgroup.