better permit matcher test