Add note about permission heredity [ci skip]