should it return smth like "kPermAllowSession" ? if so those should be enum rather than const strings.