Move permission commands into their own package