One possibility might be to report to all sites that permission has been granted, but only actually grant permission once the user has specifically chosen to do so.