I mean sure, but as long as you can deploy directly any permissions models are meaningless for an attacker? They can just be removed.