This was because I mistakenly inverted the permission requirements, causing enchantments to become unobtainable if you actually had permission for it (which if not configured will always be true)