Mike, could you perhaps add a routing that might cleanup whatever permissions fell through before? Like an optional thingymajingy in the tools section, that could be used by those of us who previously encountered issues and which will do some maintenance on the permissions table?
I'd be fine if this is config-file enabled only, just wouldn't mind knowing that there's a way to easily run an internal sanity check on the database every so often.