If you're using Composer, you could do an install "for me" and capture
that straight away. Compose lets you capture/verify the correct
permissions too, but you can see whatever you're installing into the
account. Once Composer builds your package, th...