seperate 'perms_checker' config loading as a seperate param
simplify IndexReader wrapper init, just init with a cdx server