Anyone else has any experience with permissions for custom bundles how a bundle author should provide clients the ability to control access rights?