Fix access grants on initial install

This rewind fixes #67 and #91, and is based on @adamdunkley's fix. I realize that a rewind is not ideal as a permanent solution, but given the uncertainty of the best long-term approach in the discussion of #67, I thought a short-term fix was in order so that the cookbook does not break in the interim.