PR #3841 added permissions for the configuration API, but unfortunately we don't yet have a migration system that will allow us to add these permissions to existing blogs, and so the new permissions will only work on brand new blogs.

Because adding a migration system for permissions is non-trivial (see #3910), and the API is still behind auth, we're going to temporarily remove the permissions to be re-added later once we're able to add them safely.