Add a catch-all permission