The shell has no concept of "frame" and so it's sort of pointless to do this, as there is no security policy that can be applied to a specific frame within a single address space.

Rather, renderers should request interfaces from the frame interface provider, and the frame server should connect to the right service to obtain them on the renderer's behalf.