Specific permissions declared in a manifest much like browser extensions could be a good first step.