Update README with permissions note