npm install with unsafe perms