add app user to  group munki to avoid read/write permissions for apps/users that access the repository.