you can specify the `mode '0755'` on the template resource so you don't have to do this.