With increased usage of $OAK, it would absolutely be worthwhile to establish a process for setting and tracking permissions to which directories on Oak. The Sherlock docs have some information about setting access constraints, but I think it may be worth having the access information, including access permissions and a script to set them, tracked in source control so we can track changes over time and also more easily transfer this knowledge from person to person as needed.