Ensure lenses are owned by root

This is necessary as lenses are fetched with file via puppet urls.
This leads to whoever ownes the files on the puppet master owns the
files on the node. This may lead to arbitrary users owning the lenses.
See http://projects.puppetlabs.com/issues/5240