Expand comment about perm checking on metadata fields in DBPermissionManager.getPerm()