* Reworked ordering of permission setting to make sure the perms are
  more likely to be correct before deploy
* Use ss_ prefix for default testing config