add new perms_handler for supporting direct permissions api
currently just returning ["allow"] or ["block"] for a single url