<!-- `cranpose_services::install_app_update` hands the downloaded package to
`PackageInstaller`, and Android refuses a session from an application that
has not declared it may install packages. The user still confirms the
install itself; without the permission the confirmation never appears. -->