Add note about permissions