Add permission watch.instance

As watching instances can lead to many notifications, this can be
disallowed by permission settings.