set explicit permissions on pandoc binaries