Adjust the client perms at the end of the OSC upgrade process

Without this chef client runs won't work and will return 403
grant_cilent? maybe grant_client?