add support for :false in permission nodes