You are changing the required permission here, from list.hidden to vanish.interact.

vanish.interact = do something to a vanished player
list.hidden = get info about a vanished player

This might need clarification or cleanup, but this is currently breaking that convention.