Closes #255: default permission is private