Only allowed to prompt for permissions due to a user action. Which is shitty, but I should have seen is documented.
Also, when I try to create an account on the forums (not using facebook connect) I get a “cannot connect to socket” error. I guess I go back to their older clunkier API? Seems to be a number of complaints but no answers from Facebook.