Permissions now load just the namespace and/or repository permissions requested, with a fallback to a full permissions load if necessary.
Fixes #427