Update README.md

Add instructions on where to put permission definitions