added info about permissions for access keys