In order to do that in a compositor-independent way we need a mechanism to specify app permissions à la Android. This would probably involve something...