Minimizing the calls to permission_p is undoubtably important, of course, but I think we've sped up the permissions checking considerably from ACS 4 classic.
Yep, we rolled the improved version in a month or two ago and saw
some nice improvements. Thanks to the folks who did the tuning!