pubsub + perms: wildcards, namespaces (sandbox permissions)

This example allows permissions to be allowed / disallowed by the sandbox name in `permissions.js`.

More docs / some more clean up on the way.