Fix permission logic. Add additional password.