It should request WRITE_SECURE_SETTINGS permission, to support rootless devices. That's how Purr and Pixels work
WRITE_SECURE_SETTINGS