ensure data directory exists+permissions