- [ ] Public API extension: subtree filtering by EntryType (HasPermission filtering is done but HasSubtreePermission filtering is missing). - [ ] Substitute all PermissionQuery method with LINQ queries. - [ ] Documentation with examples. See the uses cases in the unit tests of the SecurityQueryTests.cs