Managing custom permissions using separate table is on our priority to do list. But you can avoid modifying json on change of permissions, by switching off developer mode in your site config. In your production setup, you should never enable developer_mode.