Pardon me if this is a naïve question. Isn't the point of references that they can be checked and verified? Why would you need to obtain explicit consent to contact the contacts when they've been provided? Isn't the consent implicit by virtue of them being supplied?