presumably os updates (from google) must have the privileges necessary to do exactly this or maybe this is the interface used for OS updates?