Build a clean permissions: block for your plugin.yml - nodes, descriptions, defaults, and wildcard children.
permissions: