Ok this seems to work for both `pave new` and `pave setup:permissions`.