Don't add permissions twice. The upgrade code is also run for newly created databases so we can only add them on the first run.