Implement per-item permission setting on docs, agents, users and groups. Added a content type parameter for ItemPermissionSet so that in cases where item permissions are different from scoped permissions we can distinguish the two.