Better support for multipart key/value combinations (representing AND conditions for filtering) in permission objects.