Core/Rbac: world.command to auth.rbac_permissions