Add storage and cache wrappers to apply a permissions mask to a storage