No code changes, but spurious permissions removed.
Turned out various unused google libraries pulled in from the build also brought in a host of permissions including "user identity". Something I don't want.
Also removed access to SD card. I put this in originally so that export could write to card. However, writing to SD card is becoming impossible with Android, so instead the app can publish the file as a stream to another consumer. eg a file manager.