Lock down permissions on /home/app/concerto