test coverage for permissions
use continuables
add support for whitelist/blacklist based authorizations
tidy
document permissions api
0.5.0