Update the perms so ES deamon can read files but not update them