faster permission aggregation; avoid duplicate action array entries