Playing around with permission functionalities to ensure they are expressive enough to accurately query what a client is allowed to do.