The permissions for the 'everyone' group were not serialized because the list of groups a user can view did not include it. This bug was introduced in commit dfaf9831f7.
dfaf9831f7