Add possibly risky user perms