Adding ability to add 'su' in logrotate

Newer versions of logrotate require "su" when directory permissions are either too open or not owned by root. Some users will see the following error:

error: skipping "/path/to/logfile/something.log" because parent directory has insecure permissions (It's world writable or writable by group which is not "root") Set "su" directive in config file to tell logrotate which user/group should be used for rotation.

Adding this functionality into the cookbook.