Check permissions when rendering the menu
Hook up the providers to verify that only existing tags can be added

Now we actually have a minimally usable product.