Admins can now configure default permissions that will be granted to all
registered users (#236)