The permissions used by the extension. Which is awkward since they are exactly the same than in Steem Keychain. Im trying to get in touch with them. In the meantime it just got accepted on FF.