File permissions on webroot vs installing plugins