Enforce least privilege permissions required for app and collector

As this app becomes more integrated with BB and is eventually deployed by customers, we need to ensure it has the least amount of privileges it requires to operate for both app and collector.