added permission checking on password files