Ensure TokenUser.permissions is a set