Simplify the front-end code that transforms annotation permissions
objects into ACLs. Since the front-end does not have to be exposed
to the system principals and special "all" grant used by Pyramid it
only needs to have special handling of the "group:__world__"
principal; others are unused.