units/lagann: remove permissions that lagann doesn't need