I believe you have hit a defect - QM001680708. This is targeted to be fixed in 8.2
There are a lot of ways to do this after import.
-navigate to the object and update acls
-update the acls on a smart group that the server is in (in addition to other servers in the group)
-write a blcli script to do the import and the permission set.