hour of testing permissions later, 8a43ad025cc98c58b74b8566dba791b0d290b81c is now working (?)