Fix * permission remaining on player indefinitely

By using a PermissionAttachment instead of the Vault Permissions object.