Start on best practices for permissions