Move permissions to entry point in template to align with pushHeadless sample