1service pkvm_enabler /vendor/bin/pkvm_enabler
2    reboot_on_failure reboot,pkvm-not-enabled
3    user root
4
5# Old bootloaders do not set the protected_vm sysprop when pkvm is disabled
6on early-init && property:ro.boot.hypervisor.protected_vm.supported=
7    exec_start pkvm_enabler
8
9# New bootloaders set the protected_vm sysprop to 0 when pkvm is disabled
10on early-init && property:ro.boot.hypervisor.protected_vm.supported=0
11    exec_start pkvm_enabler
12