Adds permission checking to export_scan method.

Returns an explict PermissionError on a 403 response. Otherwise,
raises an APIError. (Typically on a 500 response.)
Adds permission checking to import_scan method.

Raises an explicit PermissionError on 403 response. Raises an APIError
on a 500 response (which is the typical behavior of a failure at this
time).