Handle errors narrowly also in permissions service