worksite realms
user types define what kind general rights a user has like grant admin: site.add perm's* user.<type>.<perm>
auth role of user.template that controls the account's rights
*take a look at melete install docs for places where specific tool requirements are propogated ( partially manual for now)