Update to new permissions model

This updates mapper to work (at least, tests pass!) after
mozilla/build-relengapi#40 lands.