Trusted-path permission checking