file permissions too fussy; let external acls/filesystem settings handle this