allow empty permissions on client connect