What would happen if one application says it needs a permission called "bluetooth:ALLOW" in its manifest? Would this lead to SQL-injection like vulnerabilities?