init: add permissions change for Ondemand