Derive permission manifest rule set

Derive a permission manifest rule set from the rules on a permission manifest manager.