kdm user permissions are set in packaging