People frequently ask how to set specific permission nodes for optional arguments and the answer is always to create a separate command with the optional argument as a required argument. We should have a section explaining this somewhere so that we can at least send it as a link when people ask about it.