authorize with configurable capabilities

Blocked by !267 (merged)

Base the authorizer's policies on a per-list configurable set of capabilities.

The capabilities are a a list of terms with a true/false-flag as value, stored in the list-option subscription_permissions. They take the place of keywords_admin_only.

Closes #385 (closed)

Waiting for #424 (closed).