Permissions policies can be bypassed via process.mainModule