ensure deploy user perms