diff --git a/apex/Android.bp b/apex/Android.bp
index c077a77..7085d59 100644
--- a/apex/Android.bp
+++ b/apex/Android.bp
@@ -42,6 +42,9 @@
         },
     },
     key: "com.android.media.key",
+    prefer_sanitize: {
+        cfi: true,
+    },
 }
 
 apex {