[perms] use strict