Permissions policies can be bypassed via Module._load.