Add authz information to generated command help

We need to add authz information to the generated documentation for our commands; this should help our users understand how to allow or deny activities on nodes more effectively.

This probably involves moving from the current messy eval format to a saner format (eg: named printf substitution with '%

') in the template. Which is an overall win anyhow.