Update to config.xml to tone down requested permissions