move hard-coded params to cfg variables.
add feature

* OpsWorks set_permission