Fix typos, add note about when to use permissions