The code in command.c shouldn't mess with a pointer to
client->permission.  Provide an API for accessing this value.