[`GroupPermission`] (https://github.com/mozilla/zamboni/blob/master/mkt/api/authorization.py#L211) rather

I'm not sure it's necessary to do this like this. Using @washort 's `AnyOf` or my `ByHttpMethod` you could achieve the same thing without a new class, I think.