fix: ignore orphaned entries in permission store