Allow api services to return permission information from decode()