Because we're going to need to look up permissions at some point (like we do for apps) and that will be async.