ensured isGranted builds mask by adding permissions