Hopefully stable permission model for a while