How Agents Ask for Permission: User Permissions for AI Agents, from Interfaces to Enforcement