If checking 'apply default permissions', apply even saner defaults