Use optional permissions for specific sites rather than access to everything