cleaner: don't change permissions on paths marked skip_clean