Allow multiple permissions in a single call; #4