capture or inspect permission snapshots.
;snapshot [list | diff [id] | fix [id] [confirm]]
list | diff [id
id
confirm