Of the choices given, which one identifies the core purpose of the android:permission attribute declared on an individual Activity (not on the manifest application element)?

• A.The attribute grants the app elevated system privileges for the lifetime of that Activity; the process is re-labelled into the platform_app SELinux domain (a documented behavior)
• B.It names the runtime permissions the Activity requests from the user during onCreate(); the framework raises the consent dialog automatically on first launch
• C.It controls the visibility of the Activity in launcher queries through PackageManager.queryIntentActivities(); a caller lacking the permission receives an empty result list rather than a SecurityException raised by the resolver
• D.It requires any external caller to hold the specified permission before the system will allow startActivity() to succeed for that Activity; callers lacking the permission receive a SecurityException