Fine-grained permissions are already shipped btw, though the documentation could be better.