fix permissions for attestation