in terms of performance improvements: the only major benefit is if you're checking the same permission, for the same subject, against difference resources