fight gpg permissions model