permission: add a guest user

[skip ci]