Trustworthy Feature Importance Avoids Unrestricted Permutations