enforce home folder permissions/ownership