extract deployment and site permissions to site attributes
include sites recipe by default