Allow a base set of permissions required for all untrusted apps