systemd-appd would put app identity and permissions in one place
A draft pull request proposes a new systemd component that lets session services reliably identify running apps and read their permissions over Varlink, built for the Flatpak 2.0 effort.