[JBVFS-186] Part 1: the permission itself
More robust VirtualFilePermission; also add testing and permission checks at VirtualFile call sites
Add a privileged mode to real filesystem