Permissions on files are ignored in computing cache keys, so a change that only affects permission bits results in rCDS reusing a stale Docker image.