move permission update into entrypoint.sh