PLINK-268 simplify user-facing permissions API