I might clarify even more:

    ... for the CLI and the web server, because it avoids any of these permissions issues. This is done by...