allow the handle chain to be broken using the Message.propagate attribute
create a RightsHandler to set permissions for commands - fixes #16