Need to be able to configure sub-permissions of different access keys