Support pypika terms in permission_query_conditions

Permission hooks can return a query builder term as well as a SQL string.