diff --git a/README.md b/README.md
index c2526b7..ec11afb 100644
--- a/README.md
+++ b/README.md
@@ -3,5 +3,5 @@
 This is a small program that posts an image from `./posts` every time you call it. You can call it like so:
 
 ```
-MASTODON_INSTANCE_URL=... MASTODON_ACCESS_TOKEN=... deno run --allow-env --allow-net --allow-write=./posts --allow-read=./posts main.ts
+MASTODON_INSTANCE_URL=... MASTODON_ACCESS_TOKEN=... deno run --allow-env --allow-net --allow-write --allow-read main.ts
 ```
diff --git a/main.ts b/main.ts
index 6f7526d..c689d6c 100644
--- a/main.ts
+++ b/main.ts
@@ -97,5 +97,7 @@ const statusRequest = await fetch(`${MASTODON_INSTANCE_URL}/api/v1/statuses`, {
 console.log("statusRequest", statusRequest);
 
 console.log("Linking posted file so we can skip it in the future…");
+// FIXME: This requires unrestricted `--allow-read` and `--allow-write` at the;
+// deno should provide a finer-grained permission prompt here
 await Deno.symlink(`./posts/${fileToPost}`, `./posts/.posted/${fileToPost}`);
 console.log("Done!");