New Permission Checkers

Two new checkers where implemented. A permission checker which merges the permissions before checking them and a dedicated Holder can access Holder checker.

This marks the end in wildcard permissions in permit. Its nearly impossible to have a right priority/inheritance for user > group > denied vs granted vs inherited AND wildcards.