How about granting selective permissions to apps. That way, you can have the cake and eat it too :) We wrote a paper on this months back. Take a look if you're interested:http://doi.acm.org/10.1145/1755688.1755732