refactor some variable names and add SASL identity
allow "admin" permission to override all permissions