If you need excess permissions, then why use a package format that promises sandboxing?