Add owner group and mode to all applicable modules

This is Ansible best practice, and help us better enforce the principle
of least privilege.