Cleanups to permission handling:
 - De-parametize global and item permission sets (whoever thought
   of that was stupid.)
 - Fix some of the templates around revoking permissions
Refactor the way global and item permission sets are deserialized