Utilities for user permission system

Sadly, the website service will have to know a little about the user module for now...

This has to be merged simultaneously with https://github.com/my-koop/module.user/pull/52.