* resolve renderer permissions in MT authZ service * also include DS read perms * fix tests and linting