fix: ambiguity if permits and users are stored in same table, always insert "verbatim" and compare "canonicalized" identities