the problem with looking up all permissions a subject has is that it can be quite slow to compute them all; we do intend to add it once we have reflection APIs in place but the recommendation will be to not use it outside of basic scenarios: in the case where you need to check multiple permissions for the same subject, the BulkCheckPermissions API is warranted with an explicit listing of the permissions you need to check