device: cleanup permission format