Set permisssions on session-keys properly