i'm not sure about the naming as well. it's actually a `permission_assertion_map` but that's way to ugly to read so I thought I'd just keep it as 'assertions'