Add nested permissions and a few aliases