Something that would be really helpful is an "explain" mode for checkPermission, which would return the reasons why a user has or does not have a given permission. Main use-case is debugging ("why does this user not have this permission?")