Use more restrictive permissions