Root/core issue: the game has too many differetn possible actions to elegantly assign them into only four permission categories. Other examples:
Can't setup public cauldron for anything that needs to be boiled in the cauldron inventory (allowing to take the contents would also allow to grab the cauldron itself)
Lockpicking (you can't setup a Visitor area where people are allowed to open/close the gates without also allowing them to lockpick their way into the restricted areas.)
Barring a complete overhaul of the system, one way to address this would be to make certain actions leave a lesser scent but require crimeskill/permission of a higher scent. For the lockpicking, this means that you'd only ever leave a rummaging scent for doing that. However, you need Theft to do it a as crime, or theft permission to the claim. Obvious downside is adding convolution/exceptions.