To avoid further occurrences of T686, we should consider whether we need to prevent bogus permissions values in the database.
We need to make sure that there is only a handful of valid values, as wild git repositories can contain weird things.
(the queries to check the data are running)