setup file now adds AFS permissions recursively