Add "Typical permissions setup" to the README