Return only permissions requested

This makes the groups returned by the 'permissions' API only show the
permissions being requested, instead of all permissions on those groups.