[rundir] add a readme section about portability
[rundir] (SECURITY) make sure the owners of <appdir>, <appdir>/<run-file>, and <appdir>/bin match