Goal: grant permission in a fine-grained way, only allowing access when it's known to be needed.
Fixes #410