Optimized permissions minimization