pluggable apps permissions: moved or