Empty permissions lists not serializing correctly

Fixes #86