fix insecure perms