file permissions and config handling are tricky business