Add Permission.grant(privilege_set, config).
Assorted WIP stuff