Per-view permissions

Support different permissions and ACLs per view (HTTP method). For example, `@service.get(permission="read")` and `@service.put(permission="write")`
So here we're registering the routes multiple times and let pyramid routing do the right selection given the arguments, correct?