Harden access to 'sftponly' account homes

Now home directories of sftponly accounts will have group set to that
user's group and 0750 permissions, so no other users can access it.