why does it want to be a keylogger, but then still works without that permission