enrc2b: sort out permissions