NXP-15229: remove ability to deny permissions