diff --git a/configs/privapp-permissions-oem.xml b/configs/privapp-permissions-oem.xml
index d653528..d20beb9 100644
--- a/configs/privapp-permissions-oem.xml
+++ b/configs/privapp-permissions-oem.xml
@@ -31,21 +31,24 @@
         <permission name="android.permission.MODIFY_AUDIO_ROUTING"/>
     </privapp-permissions>
 
-    <privapp-permissions package="com.google.android.projection.gearhead">
-        <permission name="android.permission.READ_PHONE_STATE"/>
-        <permission name="android.permission.CALL_PHONE"/>
-        <permission name="android.permission.READ_CALL_LOG"/>
-        <permission name="android.permission.READ_CONTACTS"/>
-        <permission name="android.permission.ACCESS_FINE_LOCATION"/>
-        <permission name="android.permission.RECEIVE_SMS"/>
-        <permission name="android.permission.SEND_SMS"/>
-        <permission name="android.permission.RECORD_AUDIO"/>
-        <permission name="android.permission.READ_CALENDAR"/>
-        <permission name="android.permission.PROCESS_OUTGOING_CALLS"/>
-        <permission name="android.permission.READ_SMS"/>
-        <permission name="android.permission.RECEIVE_MMS"/>
-        <permission name="android.permission.WRITE_CALL_LOG"/>
-        <permission name="android.permission.ACCESS_COARSE_LOCATION"/>
+    <privapp-permissions package="com.google.android.projection.gearhead"
+            sha256-cert-digest="FD:B0:0C:43:DB:DE:8B:51:CB:31:2A:A8:1D:3B:5F:A1:77:13:AD:B9:4B:28:F5:98:D7:7F:8E:B8:9D:AC:EE:DF">
+        <!-- Gearhead legacy -->
+        <permission name="android.permission.READ_PHONE_STATE" fixed="false"/>
+        <permission name="android.permission.CALL_PHONE" fixed="false"/>
+        <permission name="android.permission.READ_CALL_LOG" fixed="false"/>
+        <permission name="android.permission.READ_CONTACTS" fixed="false"/>
+        <permission name="android.permission.ACCESS_FINE_LOCATION" fixed="false"/>
+        <permission name="android.permission.RECEIVE_SMS" fixed="false"/>
+        <permission name="android.permission.SEND_SMS" fixed="false"/>
+        <permission name="android.permission.RECORD_AUDIO" fixed="false"/>
+        <permission name="android.permission.READ_CALENDAR" fixed="false"/>
+        <!-- For Top Gear -->
+        <permission name="android.permission.PROCESS_OUTGOING_CALLS" fixed="false"/>
+        <permission name="android.permission.READ_SMS" fixed="false"/>
+        <permission name="android.permission.RECEIVE_MMS" fixed="false"/>
+        <permission name="android.permission.WRITE_CALL_LOG" fixed="false"/>
+        <permission name="android.permission.ACCESS_COARSE_LOCATION" fixed="false"/>
     </privapp-permissions>
 
     <privapp-permissions package="com.android.omadm.service">