just chown the settings file after consul-template creates it