fixed up plugin.yml with new permissions