when in PPB, if you remove the private permission, the user should probably be warned that the extension will not run at all.
when in PPB, if you install an extension, we current auto-grant permission. This would mean the checkbox on the post install panel will have to be checked. Is this how we want that to work? Should the user be required to check the box? If they didn't (or they uncheck) should we warn them?
EDIT: to clarify the above, it primarily is suggesting how it might work, not how it works now.