We should always keep the publish to feed constant up to date so that RZLogin checks if the audience is set, but any other permissions I think should stay out of constants.