Mining Permission Request Patterns from Android and Facebook Applications (extended author version)