The permissions_for assumed that the everyone role would be the first element of the permission overwrites but this is not guaranteed so we have to guarantee it ourselves.