Added a custom permission type and a wrapper to allow pico access denial through a security manager.