Pretty sure this should be `755`, otherwise we'll need to sudo to even execute this without `sh`. 'Full control' implies adding a `+w` bit.