update: introduce and use u_def.masterfiles_perms_mode