set group id early on, and make eb aware of consistent chmod/chown failures