Tighten dir permissions
Add tests for the default recipe