Always return a deferred from update_permission_for, even if the user cannot change permissions