Pare down permissions to only what we actually need