fixes all effective permission getters to remove grant-equivalent duplicates from the result