sane file permissions