add key permission