Apex: fix permissions on deploy