Why do I need to grant VPN profile permissions?