That only happens if you have not followed the instructions to the letter, since it will always return permission denied if you have edited that file and before aegis refhashlist is happy about the new signature.