add permcheck for the runner