if there are no existing permissions, updatePermissions will error when setting the host permissions. this defaults permissions to empty object (exactly like readPermissions does)