Fold in Permissions Policy

[annevk]

I have suggested this in meetings, but I don't think I ever actually filed an issue to track this. I don't think it makes sense that we keep two separate lists of enums and require specifications to integrate with each individually. That's extremely cumbersome. Specifications should be able to define a permission and that's that.

cc @clelland