first robust pass of SEO configuration and permissions