they aren't even really "synthetic," at least in the way that I think about synthetic permissions, because they are checked directly to drive some part of the UX