Unfortunately we do.  I had some progress getting these created in code via `permissions.rb` but in order for that to work I would have to implement a hack to only run the code when the table exists and also only if the perms weren't already created.

See also https://github.com/theforeman/foreman/blob/develop/db/seeds.d/11-permissions.rb#L1