Make sure sudoers has the correct mode, fix opt chgrp dependency

The opt file resource has to depend on the deploy user.