Removing permissions from template since not all apps should need them

Since all CLI apps use this as the base, it seems prudent not to add unnecessary permissions