Update to new permissions model

This updates mapper to work (at least, tests pass!) after mozilla/build-relengapi#40 lands.