Add :permit option to set authority action in mass

Lets say we have Things and ThingsSettings, we want to let mange settings only the users who can update Thing, so then we could do something like
```ruby
ThingsSettingsController < ApplicationController
  authorize_actions_for :find_thing, permit: :update
  # using permit: :update is the same as
  # authority_actions read: :update, create: :update, delete: :update
  def create
  end
  ...
private
  def find_thing
    Thing.find params[:thing_id]
  end
end
```