Permission model bypassing in Android