Serialize User#permissions in yaml