Use UUIDs for permissions.