Implementing selective subtraction of perms via addition of inverse permissions in the ES Security model - View it on GitHub