add default perms, just like other config entries.'
Also, when checking through multiple perms for a given strategy, once we have a positive match, break the loop, there's no need to check other perms associated to the same entry.