The catalog reads like the Winter registerPermissions() list, and a test pins the codes and their default roles.
- admin harness: boots the plugin with the admin API mounted and mints backend administrators with chosen permissions - TestAdminUsersTracer and TestAdminPrivilegedMember