Apply more restrictive permissions