setup: add a script to prepare config and rights