builtin-apply: prevent non-explicit permission changes