In-memory permission checker with simple wildcard support.
Persists proxy permissions in a TOML file.