again avoid instantiating the proxy for a comparison
make sure the after_{grant,revoke}_access callbacks get an array