Why yet another top-level dir for this? Also, the Foreman has all the permissions defined on one place? Anything against this adopting this approach? If yes, was there discussion opened around that? I would prefer having this consistent across both projects