so we can use the existing system backup API and keep this code (and the tests as well as permissions) nicely separate from seedvault itself