Syncing permissions is more involved (bug 470699), but the default permission settings (like "Block new requests asking to {access your location, access your camera, allow notifications}" are controlled by permissions.default.*-prefixed prefs.

These would be easy to add to our list of synced prefs, though it might surprise folks that we sync the global settings, but not per-site settings or exceptions.