making messages permission opt-in instead of opt-out