ensure user and group exist before directories