Directory should be created after dropping privileges
Give all permissions to user and not group. Doesn't work otherwise.