Behaviour hints reported to the client, which may use them for permission prompts. A tool with no hints is assumed to write, and possibly destroy, state.