Do not break permissions on profiles directory - it must be readable for the backend user.