introduce support for fuzzy permissions