Make 'user.permissions' a required cache context