We could potentially change `has_permission` to return `False` for all users with this backend, for example. Something to think about for later...