Remove permissions for administering users and delegating roles - they will be provided by the farm_admin module instead, along with the /farm/people View.

Give Farm Managers access to administration pages. This fixes the bug described in https://www.drupal.org/node/2562091.

Reorganize permissions that are provided on behalf of core Drupal module into appropriate hook implementations.

Remove hooks on behalf of other farm_* modules (except for farm_asset). They will provide the hook themselves.