Permissions: operate on copies of module-level mutable data

Be careful not to shoot ourselves in the foot.