Enumerating all permissions and then expanding these would be possible but is expensive and maybe we are missing something 🙂