I have once again dug into the seedy underbelly of the permission system and wrestled more race conditions and broken error handling routines into submission. (BTW, they only produced false negatives -- security was never at risk.) Hopefully bogus "permission denied" failures and hanging permission requests are a thing of the past now... But please report an issue if you're still seeing them!