Don't allow changes to person flags for now.
Untar vendor dir before every deploy/startup.
Make deploy script executable
Don't let non-admins change people flags,
and don't update materials flag on role selection.