src,permission: restrict by default when pm enabled

It goes according to the documentation:

When starting Node.js with --experimental-permission, the ability to access the file system through the fs module, spawn processes, use node:worker_threads and enable the runtime inspector will be restricted.