Fix /opt/tools permissions since they are propagated to cobalt