media-server: proper permissions for replace-tigase-vars