ccxt: fetchWithdrawals from kraken throws permission denied error

for every set of keys I try kraken throws this error for fetchWithdrawals

{ Error: kraken {"error":["EGeneral:Permission denied"]}
    at kraken.handleErrors (/Users/alexmiles/dev/tokentax/integrations/node_modules/ccxt/js/kraken.js:1184:31)
    at response.text.then (/Users/alexmiles/dev/tokentax/integrations/node_modules/ccxt/js/base/Exchange.js:650:18)
    at <anonymous>
    at process._tickCallback (internal/process/next_tick.js:188:7) constructor: [Function: ExchangeError] }

Any idea?