Add "diff" sub-command for comparing effective permissions of groups and players.
Minor polish to "dump" sub-command.