Android 4.3 introduced a new permission management feature "App Ops", and you can disable permissions that you don't want app to use. It's a big improvement for securing your device and protecting your privacy. But it's not visible to users, and you have to open it by a shortcut app.
"App Ops" is not perfect now, maybe it's the reason why they hide it. I hope to see it's improved and released in Android 5.0.