The templates read vm.isPrivate() and vm.isShared() and call vm.setPrivacy()
so vm.annotation.permissions just isn't needed.

The controller modifies domainModel.permissions when the permissions need to
change.

vm.annotation.permissions is still there, we just don't use it anymore, in the
future we should not copy it into vm.annotation at all.