Core/RBAC: Move tele commands to RBAC (using individual permissions)