AuthManager: preliminary support for permission checking