Merge "feat(pie/por): support permission indirection and overlay" into integration