Protocol version 5 was introduced with app version 73 so that becomes
the new minimum app version.

Turns out you're supposed to set the background on the app theme to null if you want to make sure that dynamic colors are applied in a way that avoids potential overdraw.

Certificates are now valid from 5 minutes before the current time on the
device to 10 minutes after, for a total validity window of 15 minutes as
was originally intended.

For convenience, we implemented support for a basic verification of the
attestation on the Auditee side. However, this needs to go away as part
of giving the Auditor side including our remote attestation service more
visibility into why failures are happening.

Removing this has been planned for a long time but didn't happen until
now due to since it wasn't as trivial to remove before
228d629.

This was replaced by our newer generation USB-C port and pogo pins. The
software USB enforcement was extended to USB gadget mode in addition to
USB peripherals and the feature is now mainly based on hardware level
enforcement for USB-C and pogo pins eliminating far more attack surface.

Checking the value of the new setting will require creating an SELinux
domain for Auditor to allow it to read the new property.