permissions: don't allow granting yourself permissions