ensure cookbooks dir is readable by rooty group