CI should provide a diff of the manifest for added Snaps, making it easier to spot changes in permissions.