Limit setgid to directories, only do on install