Be more specific with permissions
Add some serverspec tests