Would be cool if the CLI could run through code to detect what events etc. are being used and recommend RSC permissions accordingly for the app manifest.

For security, maybe it should only list 'you may need these permissions' instead of filling them out automatically in the manifest.