Clarified comment in permissions.yml