the main reason i've switched to this workflow is not to meddle with stupid permissions