keep world readable install/delete log
FPE (F-Droid Privileged Extension) should trust F-Droid itself as little as possible. The one thing that FPE should grant to F-Droid is app install/delete commands. FPE should log all of those in a world-readable log so that something like a Device Administrator app can keep tabs on the log to make sure nothing suspicious is happening.