limit to a few acceptable values, like 777, 755, 655, 644 with default of 755