54315498 Make sure that expected fields in a permissions object are
present, even if the client hadn't originally sent them.
Merge pull request #136 from reciprocity/feature/better-role-handling

54315498 Make sure that expected fields are present even if they hadn't been