set permissions, ownership, and timestamps as last step