After reading Release APK Permissions, we were finally was able to remove the permissions we needed. The one in question for you is:
<uses-permission tools:node="remove" android:name="android.permission.SYSTEM_ALERT_WINDOW" />
But, the popup still shows up in the emulator and on the test device. Will update when figured out a proper fix for this.