The runtime permissions an in-person session needs, for the app to request.
The holder's, in the default modes (both): holder of every ProximityBLEMode.
The reader's: scanning and connecting, and advertising for a holder in central client mode.
The holder's in modes: advertising and accepting a connection in peripheral server mode, scanning and connecting in central client mode.
Those of permissions the app hasn't been granted.