be (a little) more explicit about joining permissions