pub fn clamp_primary_permission_mode( base: PermissionMode, requested: Option<PermissionMode>, ) -> PermissionMode