What permissions does MemoMind One need, and why?