enable permissions model

[MihaiTabara]

From a security perspective, it's important to make sure we can segregate credentials per product. That means for example that credentials we use in the bouncer workers to update Firefox related entries, cannot perform operations in the Thunderbird land and vice-versa.

[MihaiTabara]

This should apply to all type of bouncer data, whether we talk about products, locations or aliases.