Packages define their own models, better permission structure (for now)