Update Nginx user/group and add file permission note