DP-448 opt/hadoop should not be group writable