PLINK-268 basic implementation for persistent permission checks