In the context of LCA certification, what is the most important consideration when implementing user & permission management?