updated permission propagation set in bootstrap