E0d/s3 log perms

@jarv @feanil @fredsmith  

related to https://openedx.atlassian.net/browse/DEVOPS-291.  Includes some general re-factoring too.  I'd like to fixate on this service directory creation pattern if you like it.

Still need to test on my sandbox.
Pulling them out further seems hard since different roles have differing number of directories that they need to create and track.