Yes, we could check the logged in user here.  I hadn't thought it to be a
big deal if the permisisons were readable by the world.  There's nothing
sensitive stored with in.  What do you think?