i'm screwing around with the concept of a "persona" where it has a subset of the permissions granted to a user, and ideally i'd be able to make check calls against personas or users, and i'd like to not have to duplicate all of my

user

-based permission definitions to

persona

-based definitions