allow writing to .ssh and /app