Doing things in the right order would help
Using --no-p for rsync so it doesn't screw up perms on user's $HOME dir