Rbac/Commands: Move `world.command` to `auth.rbac_permissions`.

`world.command` is no longer necessary.