DEPLOYMENTS file: fewer permissions contraints