Permissions: Universal Forwarder requires the Photo/Media/Files permission for exporting and importing forwardings to/from files, and for writing a debug log (when enabled in Settings). All files are written by default in the Download directory, but the location can be changed in Settings if desired. It requires "run at startup" so you don't have to manually run it to start the forwarder service after boot, and "full network access" for obvious reasons.
I love being able to access my private servers at home and on the go. All it needs is an SSH tunneling forwarder and it would be perfect!