this issue was reportd to me by Will Hopkins
documented permissions used to protect getFactory and setFactory.
also defined public static final Strings and permissions to
assist runtimes in creating or using these permissions.
also added new permission to protect factory registration and deregistration methods.