allow mediacodec firmware_file:file { open read };