Special privileges. Based on django groups as a start, but we might want to use a custom class
Note that we're using custom groups here, which live in the db. This means that it is now even more important to be able to restore static information to the db programmatically.