Instead of making each cosmetics usable using permissions they should have their own token and when you right click the token the cosmetic unlocks for you. This is very useful for stores and loot crates.
Example: