tighter perms on init file