define a :crud ability, and use that for setting permissions on teh Registrant object instead of :manage