cookbook_file needs only owner/group actions.