it can also be used down the road for multiple namespaces per org/user or namespace hierarchies with cascading permissions