Adding to that, IMO there should also be an option that feeds bogus data to the app so it can't know if a resource is blocked. So many apps just refuse to work if you deny them the resources they don't need