Don't break on unknown permissions
Migrate cote to pyramid's latest version
Use pyramid_ldap instead of who