ensure permissions of possible volume mounts