I don't know, but I'm thinking of things like the AWS permission system. You have role and a bunch of permission that you can add/remove at runtime. I think remove is actually really useful.