Account should own a PermissionAttachment

This allows us to grant permissions based on the player's level, when
their account is being initialized. Also move granting server operator
rights to Management members to the Account initialization.
Rename PasswordHash to SecurePasswordHash