Update fixing-npm-permissions.md

Add a caveat to step 2 of option 1 to save future people going through this documentation some potential grief.