is it possible that several permissions give access to a same method? For instance an API module can have some sub-divisions, like READ and WRITE, like messaging could have MESSAGING - gives access to all the methods, MESSAGING-WRITE - gives access to sending methods only, so both permissions are valid for "sendSMS" method. Do you think we will have such cases?