This is a sync adapter that runs in the background, so you can run the synchronous patching.

SyncAdapter.java

public class SyncAdapter extends AbstractThreadedSyncAdapter {
    ...
    // This is called each time a sync is attempted; this is okay, since the
    // overhead is negligible if the security provider is up-to-date.
    @Override
    public void onPerformSync(Account account, Bundle extras, String authority,
        ContentProviderClient provider, SyncResult syncResult) {
        try {
            ProviderInstaller.installIfNeeded(getContext());
        } catch (GooglePlayServicesRepairableException e) {
            // Indicates that Google Play services is out of date, disabled, etc.
            // Prompt the user to install/update/enable Google Play services.
            GooglePlayServicesUtil.showErrorNotification(
                e.getConnectionStatusCode(), getContext());
            // Notify the SyncManager that a soft error occurred.
            syncResult.stats.numIOExceptions++;
            return;
        } catch (GooglePlayServicesNotAvailableException e) {
            // Indicates a non-recoverable error; the ProviderInstaller is not able
            // to install an up-to-date Provider.
            // Notify the SyncManager that a hard error occurred.
            //in this case: make sure that you inform your API of it.
            syncResult.stats.numAuthExceptions++;
            return;
        }
        // If this is reached, you know that the provider was already up-to-date,
        // or was successfully updated.
    }
}