I appreciate the feedback, and we're still thinking about how best to do it. I'm hoping at some point twitter will implement a more granular way to ask for permissions.
As for direct messages, I believe twitter will stop asking for that either today or tomorrow.