Setup permissions properly on deploy