Split new permissions into their own migration file