Cross domain local storage, with permissions