As part of #180686 in pursuit of #172553, we are allowing the ability to set engine flags on Android via the manifest. We will only allow known metadata flags to be passed along to the engine. Currently, all flags passed on the command line are passed to the engine (see source). So, we should consider securing the command line flags in a similar ways as those specified in the manifest by only allowing known flags to be passed to the engine.