Extensibility
the big thing for extensibility is being able to add your own permissions. there is an IPermissionRegistrar plugin that lets you do that. not sure how much there is beyond that and the APIs to check permissions.