initial exploration of grouper backed permission store