Make DBPermissionManager.personaMatch() make sure that it tests top-level container objects