finally proper ssh permissions (hopefully)