recommended permissions/owner/group for application delivery in the manual method?