further permission tweaking