with-permissions is now a handler, unit tests pass again