Add the appropriate VirtualFilePermission per resource root