Actually check kit permissions