just to clarify, revision represents the latest dataset in the db, meaning an update to a permission would publish a new revision number? single revision number for the entire cluster?