Copy functionality of `permissions` service minus `localStorage`
dependency into a new util; add `isPrivate` method for convenience.