Add "grant execute on sp to fleet"

without this, fleet can't see the sp