Improve scheduler permissions

[grebneerg]

Currently (after #226 merges) the scheduler has very naive permissions, allowing anyone to schedule any command that they are able to call directly, and anyone to delete any command. A more complex permission system, particularly around who can delete what and who can schedule where, would be very useful.