adjust manifest to a lower permission