restrict permissions to mail.google.com, close #1