[scoot]

> You lock that permission set in for future runs

Thanks, that was the important bit missing from OP's description.