reduced permissions further