CORE-3742: The stat endpoint was still using the broken permission
listing.