Per-device permissions. Control what Bruce can access and execute.