refactor sieve permissions into Permissions object. updates doc/readme