Move permission string into note object, make format customizable per tier