diff --git a/private/system_server.te b/private/system_server.te
index 886499e..73d2ac7 100644
--- a/private/system_server.te
+++ b/private/system_server.te
@@ -333,6 +333,7 @@
 hal_client_domain(system_server, hal_rebootescrow)
 hal_client_domain(system_server, hal_remotelyprovisionedcomponent_avf)
 hal_client_domain(system_server, hal_sensors)
+hal_client_domain(system_server, hal_secretkeeper)
 hal_client_domain(system_server, hal_tetheroffload)
 hal_client_domain(system_server, hal_thermal)
 hal_client_domain(system_server, hal_threadnetwork)
@@ -1006,6 +1007,7 @@
 	change_user
 	clear_ns
 	clear_uid
+	delete_all_keys
 	get_last_auth_time
 	lock
 	pull_metrics