Doze, definitely. No other feature can be fully functional, implemented when needed, or otherwise enjoyed at the end of a day if there is no power left. Do you think the droid eats apples?
Definitely permission controls. It's understandable once a developer explains why their app needs certain permissions and most think it's just to steal data, etc.