pull out chmod's into rules as much as possible; run clean after install