I can add an exception here, that if the calling process is unconfined and does not provide an applicationId, we just let the request through.
I can add an exception here, that if the calling process is unconfined and does not provide an applicationId, we just let the request through.