tang: set the right permissions to keys