and we're just building the package using the tools from the repo. So the permissions were set by the package during install I'm guessing