A list of the enum values is subject to issues if any given permission is ever removed. We should - Change this to a `List<string>`? - Change this back to use AspNetRoleClaims?