first attempt at geolocation controls/permissions (for trusted core apps only)