WFCORE-135: remove custom runtime permissions

The issue is twofold.  But since permissions are by definition API, I only want to change it one time.  People have to be able to put these permissions in their policy and expect them to remain indefinitely.  Thus it's important to closely manage the domain of permission names and action for each permission class.