Or you can do what CyanogenMod does: allow the user to pretend to give some permission to a program. This will obviously devolve into an arms race between bette

Or you can do what CyanogenMod does: allow the user to pretend to give some permission to a program. This will obviously devolve into an arms race between better emulation of these permissions and better detection of the emulation (debugger detectors come to mind), but this seems to be a better outcome than you posit.