edit_hosts should probably also get create/delete interfaces permissions