I think I said something in office hours — we already depend on the unix permissions enforcement, so this seems fine.