Please avoid --device=all

--device=all is a known sandbox escape vector and should be avoided if possible. Is it possible to remove this permission or use a less broad permission? This application already has --socket=pcsc which should cover the smart unlock thing I think?

Start by locating the Flatpak manifest and reviewing how --device=all and --socket=pcsc are declared. Check whether the application still supports its smart-unlock behavior without the broad device permission, then build and run the application to confirm the sandbox configuration works.

Written by the indexing model from the issue text.