...
- Extending scoping options. Instead of just local and global we could also use a body type of a local as scope.
- Explicit triggers for contexts. Currently it is hardcoded which additional permissions e.g. a circle_admin gets, it would be nice to have a trigger object with a many to many on permissions that dynamically adds permissions on requesting the associated context