Introduces a per-shop privilege management tool that allows us to grant access to a shop by role or user and check for privileges. Custom privileges can be added via filter "wss/privileges".