Tighten required app permissions.