they don't have to give explicit permission though, they just have to not disallow it (which an EULA could do, in the US at least)