Quinn, We're trying to minimize updates chasing the key name. The only OS version with the kTCCServiceEndpointSecurityClient key is 13.0.0? All others will use kTCCServiceSystemPolicyAllFiles? Is that correct -- at least for the near future? Thanks a lot, Jim