drone server with modified permissions for secrets and approvals