We should hang the sync/suspend off the Permissions framework to allow centralisation of control of these permissions. https://backstage.io/docs/permissions/overview/