They're abandoning the current ask-for-everything-up-front permission model for something closer to how iOS does it, allowing an app to make a permission request any time it wants, but now apps have to deal with users who say "no". Legacy apps don't need to make these requests, but users can go in and revoke permissions.