typesafe permissions - tRPC