Headwind MDM uses policies listed in `device_admin.xml` when it becomes a device owner, that is, only once. Hence, updating the MDM application with extended device admin permissions will not work. The only way to apply the new permissions is to factory reset the device.