Windows uses 20 capability groups [51] to protect native objects.
Developers must declare all capabilities needed by their apps in the
manifests. The user is prompted when an app wants to use a given
permission for the first time; all subsequent requests are granted or
denied based on this decision.