just had an idea... depending on how often i would have to change the relation packageuser... could it make sense to simply check permission "fully_consistency" after my change, even tho i dont actually have to check the permission... just to force update permissions?