Permissions can be flagged as having a security risk if enabled; this is the restrict access flag. When this flag is set to restrict access: TRUE, it will add a warning to the permission description.
This allows module developers to provide more context to the amount of control a permission may give a user:

The permission definition from our recipe would look like the following:
view mymodule pages:
title: 'View my module pages'
description: 'Allows users to view pages provided by My Module'
restrict access: TRUE