identity is a literal key - no? so should be

<pre>
permissions => {
  identity => [... ]
</pre>

or
<pre>
permissions => {
  'identity' => [... ]
</pre>