adjust readme for permission clarity