- _fix_permissions: capture stderr, check returncode, only set _permissions_fixed on success instead of silently marking as fixed - list_node_files: wrap os.scandir in try-except to handle PermissionError gracefully