diff --git a/server/frida-server.xcent b/server/frida-server.xcent
index ecbeb7201..802992631 100644
--- a/server/frida-server.xcent
+++ b/server/frida-server.xcent
@@ -2,6 +2,12 @@
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
 <plist version="1.0">
 <dict>
+	<key>com.apple.security.network.client</key>
+	<true/>
+	<key>com.apple.security.network.server</key>
+	<true/>
+	<key>research.com.apple.license-to-operate</key>
+	<true/>
 	<key>abs-client</key>
 	<string>143531244</string>
 	<key>adi-client</key>
@@ -296,6 +302,8 @@
 	<true/>
 	<key>com.apple.sh</key>
 	<true/>
+	<key>com.apple.private.cs.debugger</key>
+	<true/>
 	<key>com.apple.springboard.debugapplications</key>
 	<true/>
 	<key>com.apple.springboard.iconState</key>
diff --git a/src/darwin/darwin-host-session.vala b/src/darwin/darwin-host-session.vala
index 8f1336c59..bd754fd24 100644
--- a/src/darwin/darwin-host-session.vala
+++ b/src/darwin/darwin-host-session.vala
@@ -336,8 +336,13 @@ namespace Frida {
 #if HAVE_EMBEDDED_ASSETS
 			id = yield fruitjector.inject_library_resource (pid, agent, entrypoint, agent_parameters, cancellable);
 #else
-			id = yield fruitjector.inject_library_file (pid, Config.FRIDA_AGENT_PATH, entrypoint, agent_parameters,
-				cancellable);
+			string agent_path = Config.FRIDA_AGENT_PATH;
+#if IOS
+			unowned string? cryptex_path = Environment.get_variable ("CRYPTEX_MOUNT_PATH");
+			if (cryptex_path != null)
+				agent_path = cryptex_path + agent_path;
+#endif
+			id = yield fruitjector.inject_library_file (pid, agent_path, entrypoint, agent_parameters, cancellable);
 #endif
 
 			return id;