We could also just encrypt everything with a passphrase. I think assuming a single permission level is OK for now.