does it make sense to expand this to include HEAD and OPTIONS too? (aka `rest_framework.permissions.SAFE_METHODS`)