Moved permission wildcard check to lazy call to avoid errors

Signed-off-by: Irmo van den Berge <bergerkiller@gmail.com>