convert to extension classes to make permission machinery work properly. This needs some more thought.
