Without doubt there's an issue regarding proper usage of the permissions system - given that different packages from aD use the system very differently, the statement's a veritable tautalogy. :)
As far as the basic design, I've dug into it a lot more (in order to improve performance, in particular under PG) and I think it is fine, overall. It's even reasonably fast, now, I think.
