I haven't upgraded yet, but I would expect there to be a one-time user flow when upgrading. Walk the user through new features and then bring up a single page with a list of apps that need modified permissions. Let the user select all for 'Allow' and have them type in their password once. Done.