nw: add planetscape-specific perms to run ss/mtr (for now)