Inspect the entitlements of any app

codesign --display --entitlements - /Applications/Mail.app