Update config.xml

Minimzed permissions needed.