[AS7-6577] Use deployment configured permissions, if any; ensure a minimal base permission set
TEMP COMMIT: Security manager with useful, exhaustive logging