Hi, is there a way to specify a permission that intentionally return an empty userset? I can construct such a permission with some overhead, I just wonder if there could be a shortcut to do so.