Huge permissions overhaul and reduction, a nice case of practice what you preach we finally got around to 🙂