Comment by esafak

Some models have a mind of their own. I keep them on a leash with `permission` blocks in OC -- especially for rm/mv/git.