Turn Permissions Into Bounded Authority