Added ability to deny previously granted permissions in ContextWrapper