644 rather than 755 for config