When "Matrix-based security" or "Project-based Matrix Authorization Strategy" authorization is selected, the permissions are persisted in a different order on each save.

Storing them in a consistent order would make it easier to read diffs of config.xml.