Omit `authorize` in the Permissions JSON if the `authorize` list is empty