Combine XML issues, add issues for Over/Under-privilege reporting. Fix
bug in XML permission detecting.