WL-3229 Limit what permissions can be changed.

This defines:
- frozen permissions (can't be changed).
- add only permissions (can only be granted).
Merge pull request #4 from ox-it/WL-3229

WL-3229 Limit what permissions can be changed.