bugfixes for tinc perms and restart