Rbac/Commands: Move `world.command` to `auth.rbac_permissions`.