In Picketlink 3.0.0.alpha1 there is a Permission API implementation, but it isn't in version 2.5.0.betaX.
When are you planned to add the implementation in version 2.5.0?