1) Do we need an ``invenio access init`` command? 2) Do we need an ``invenio access permissions <user>`` command to list which actions are allowed/denied for a given user.