bradleymeck: not sure why it has to do with unsafe-perm