Because information about this is actually hard to find (there are loads of samples around about how to demand several rights, but hardly any about locking down your own frameworks & assemblies): I recommend for most cases to start from no rights at all (except execution and some identity permissions...