Separated permission management from key copying