Improved permission setup to allow multiple roles per permission directive, limits WETness (Did you coin that term Steven?)