That helps. Thanks.

I think the fact that we name the `PermissionResource` endpoint PUT method `updateRegistration` and the corresponding service `UpdatePermission`, although consistent with other PUT endpoints, is not as helpful semantically as naming it something like `activatePermission`, since that is really the purpose for which the endpoint exists. Barring actually changing any names, it might be helpful to include a comment on the `PermissionResource::updatePermission` to indicate the context in which that endpoint will be used.