CFBundleIdentifier com.apple.os_thread_self_restrict CFBundleName XNU test on a variety of VA access control restrictions