@override bool has(String permission) => !_matches(_denies, permission) && _matches(_grants, permission);