Adjust the client perms at the end of the OSC upgrade process

Without this chef client runs won't work and will return 403