ssh: make sure bootstrap uses correct permissions