Quick google search turns this up : http://stackoverflow.com/questions/13602190/java-lang-securityexception-requires-vibrate-permission-on-jelly-bean-4-2

It isn't our bug and adding unnecessary permissions to our libs is a bad idea.

Repeat, this is a confirmed and fixed bug in Android.