Add support for non-plugin default permissions
    
    Add support for managed permissions that are not tied to an object
    class and thus can't be defined in an Object plugin.
    
    A dict is added to hold templates for the non-plugin permissions.
    
    Reviewed-By: Martin Kosek <mkosek@redhat.com>