Mmhh nvm, actually we can directly assign, because the only way setAssertions (I mean, with the S) can be called, is by passing a string. For instance you cannot do that:

```php
$auth->setAssertions([
    $permission => 'foo'
]);
```

if $permission is not a string. So you can remove the for each and make a direct assignment.