about:permissions and non-exposure of JSON preferences todo