ceph: add execution rights