zlacker

You don't have to. On grapheneos google play service isn't given special privileges and is sandboxed like any other normal app.