What's stopping Flatpak from using a LSM to allow on-demand permissions like macOS?