add permissions for later-enabled modules