Perms and ownership set last

This should be the last thing we do.