Update README.md with permission info