Documenting the context permissions work we have just done

[skip ci]