[Q] What's the best way to control app permissions in Lollipop topic

I've always used Xposed and XPrivacy but since that isn't an option right now, what's the best way to control app permissions in Lollipop? I'm willing to flash custom ROMS to do this. One thing is Facebook is very good at getting around Location blocks, and I don't quite trust them with my location. So blocking FB locations is my test of the method succeeding or failing.

Thanks