Fix download permission spec, add cider-ci tasks