I'm open to suggestions, but absent anything better i think this use is good, I don't like `Grant`, and `PermissionSet` was the other idea i had (which i also didn't really like).