like, for example "any user permission means all their tokens get permission"