Reduce permissions changes scope after ADD/COPY Upstream-commit: 64ebffe7b6e4a6732b3b6f56585bc8d01f4f8ed0 Component: engine