Changed permission script to be ran at appUp, before being visible to
the outside. Otherwise the first unpaused request gets an error.