geehrc: give cmdline permissions