Set perms on session-keys properly