Install 1.0.6 needs unnecessary rbac

I tried upgrading isito to the latest 1.0.6 version the same way i do after every new release is available. I use helm to do so
This time when i tried it gave me following errors

helm upgrade istio install/kubernetes/helm/istio -f $DEVOPS_HOME/config/istio/develop-istio-override-values.yaml --namespace istio-system
Error: UPGRADE FAILED: configmaps is forbidden: User “system:serviceaccount:kube-system:default” cannot list configmaps in the namespace “kube-system”

till now i used to give tiller all the permisions and temporarily eleviate tiller to cluster admin(which i did) but this time i had to add this user “system:serviceaccount:kube-system:default” to cluster admin
There seems to be some issue ?