you'll need to know the semantics of the permissions/relations anyway; you'll likely need to do this during compilation