One limitation of our model, is that we can't specify multiple rights to be OR'ed together. For example, on a directory I could see wanting to grant `read_execute` and `list` permissions. But the only way to do that now is to specify the binary hex value.

Alternatively, we could allow multiple rights, e.g.
<pre>
['bob', grant, [read_execute, list]]
</pre>