Since this is actually an auxiliary module (no session/payload), should this line just be dropped? Maybe add a permissions comment to the module description?