More permissive default permissions for front-end files (#388)