Add some more useful comments in permissions.go to describe at a high

level what they do.

Signed-off-by: Silas Davis <silas@monax.io>