Move this into `Permission` as a `fromString` method?