add private-browsing permissions, fixed #1