Implement additional interface filtering for objects (OMS-281)

Filter containers to expand/inject into by the interfaces they provide
Make commands transient and inherit parent's permissions by default