A theoretical way to circumvent Android developer verification