talk about best practices
also give read access to /usr/local/bin/cr