Complete GPO profile (refs #7519)

A rebase wasn't quite as painful as I was thinking it would be. This will be easier to squash.
This only applies to GPO right statements, so I'm guessing that this might be the best location.