When discussing Folio-377, we realized that our ModuleDescriptor is not quite right. The problem is that permissions (and later, permission sets) will need to belong to an interface the module supports, and also to the RoutingEntries that need them. Therefore RoutingEntries should be handled under the provided interfaces, not globally for the whole module.
We can still use global RoutingEntries for filter-like things like mod-authtoken, logging, and timing - things that don't provide a decided interface.
We also need to have a new section for the system interfaces the module provides. At the moment we have the tenant interface, and soon we will have one more, for catching when modules get enabled for tenants, in the first instance to make sure mod-permission can add the module's permissions (and sets) into its database. Later, we will have more stuff like that.