FIX: Clarify explicit permission requirement
FIX: Refactor AccessList package