Bouncer should only require minimal permissions

[DecentralizedDan]

Bouncer should not require any permissions that it doesn't actually use.

• We should generate a new invite link for it with only those minimal permissions