remove unnecessary permissions from docs and sample app