update the readme to reflect the new permissions