We need a few permissions to make Kestrel work