Headless Permissions: Access Control as Typed Relationships — headless.ly