Sync permissions with new defaults in the hardened setup.