maintain permissions on pgool.conf
use correct retention expression for rdiff-backup