Feature/sieving permissions

Splits out rightsMetadata related functionality into three helper modules and ensures that created collections/core_files don't have permissions exceeding their respective parents.