Update readme to explain how permissions works