iRODS improvements to permissions handling