sg: restore command permission for TYPE_SCANNER