cap packages have the wrong permissions after deployment, this is an ugly hack because puppet wont allow an umask override for the gem provider.