Simple, lightweight permissions plugin