Added PermissionSpec to test finding of previously granted permissions
Permissions uses the LookUpCache in Approval

For each ContentEntry, entry.course is a separate LazyId.  Where sequences of content entries were returned, this would look up several lazy ids to the same Course.  Caching them in Approval reduces this.

Later we might need to revisit how caching is performed.