Abstract permission identifier.
KTale does not assume any specific permission engine. A platform adapter decides how permissions are checked and represented.