Handle empty permissions for packaged apps (bug 1039067)

https://bugzilla.mozilla.org/show_bug.cgi?id=1039067

Handle the case where there aren't any permissions in the manifest which the app-validator helpfully represents as `False` instead of `[]`.
It would be cool if we had a way to test these w/o adding a new .zip each time?