make permissions generic?

[mversic]

          On the one hand, would be great to keep these primitive and build on top of them (maybe through some concept of permission bundles). On the other, I can't come up with an example where you would need to be able to set and remove key-values separately. Maybe a producer-consumer type of situation. It's difficult to tell without user feedback, I think for the MVP this should be fine.

(Also, it's interesting that we lean heavily into generic structs with ISI (and don't really reap the benefits), but permissions/queries are all flat structs.)

Originally posted by @nxsaken in #5075 (comment)