add Entrust role-based permission package