add permissions hook for wmf_audit

Change-Id: I2ce4b5a6df71ca90f149451e8dea8414d81d31c5
Merge remote-tracking branch 'origin/master' into HEAD

Change-Id: I608148be1e5a83e7af718d9e8ee01e835d907841