packaging: add hidden attribute to required permissions