[cubification] moved CWPermission handling into a localperms cube. closes #1914011 keeping bw compat provided the cube is available (else user should be warned he has to install it).

card, file, tag, localperms