A log of all permissions being used
Restrict access to view configuration.

Add a 'ui.config.view' permission