This all came up because of https://github.com/theforeman/foreman-documentation/pull/3271. Copying https://github.com/theforeman/foreman-documentation/pull/3271#issuecomment-2931361478.

• In Foreman 1.13 via #13529 duplicate permissions were forbidden via a unique index (954abbaf59154c90717f6b56d54fae9d8168d010)
• In Foreman 1.20 via #24256 this was (unintentionally) reverted (672149bad448513e455e90450241d01df2beb088)
• This was reported in #30527 when users upgraded to Foreman 1.22. There a foreman-maintain procedure was introduced instead of properly addressing the regression.