added note about service and permissions to readme