I know its possible to use the same permission key for multiple objects but do you consider this to be a best practice? Or would you recommend a one-to-one relationship? One permission key per object/action.