grant +r always when granting +w privs (they’re orthogonal)