Paypal merchant permissions

That's how paypal api does things, and probably why I ended up copying the same idea here, but it's not tied to paypal directly so I could change that...