what is performance impact doing it via bunch of small files per user? what about one file per permission that have multiple ifs or smart if with ```or``` inside?