weak registry permissions