And that is perfectly fine by me. There's a very limited subset of features which would require this kind of explicit authorization.