Add basic support for meta-grant permission

This allows us to grant people the ability to control the granting of a
permission. This does not allow per-argument control yet, but suffices
for a basic setup.