Consider adding a `permissions: write-all` construct

[ivankovnatsky]

That might feel like too much, though there's an option to define:

permissions: write-all