You lose out on the neutrality of having your permissions system be a service, as well as the ability to break down problems into subproblems which get federated to other nodes in a cluster (in many embedded scenarios)