added hosted/privileged app permissions info