be more clear wrt share_dir permissions

"should" is not very strong.
also "should not have write access" can be interpreted differently then "requires no write access"