Each subcommand has an individual permission depending on its name. For example, the command
/hd list requires the permission
The main command
/hd is accessible by everyone.
Receive update notifications on join if enabled in the configuration.
All the permissions combined, if your permissions plugin supports it.