Fixes issue where user/group perms could NEVER be removed (revoked)