Upgrade gds-sso to support new permissions format